Vconnect Magento 2 vShip Integration Metapackage
62%
Total Score
caution
Usable with caveats: limited transparency and a single registry maintainer make ongoing support harder to verify.
The metapackage declares four runtime dependencies and no development dependencies. This is appropriate for an integration metapackage, but adoption also depends on the maintenance of those four components.
The manifest declares a proprietary license, so licensing is explicit even though no license file was detected. This is acceptable for transparency, but it may restrict use compared with an open-source license.
Only one account has registry publish access. Administrative access is not proof of actual activity, but a single observable publisher provides limited resilience if that maintainer becomes inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vshipdk/php-sdk Version ^3.0 | — | — |
vconnect/module-vship Version 1.2.0 | — | — |
vconnect/module-vship-admin-ui Version 1.2.1 | — | — |
vconnect/module-vship-commlink Version 2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.